Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa
File: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (raw, json)
Hash identifier: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=
Subject key identifier: 62:4C:8B:34:97:BC:7A:0E:7F:65:65:97:46:A8:1B:D4:51:1E:74:25
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019423D723B95CF561BFDE7171E3389E167E
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201160
IP address blocks: 217.8.120.0/24 maxlen: 24
217.8.121.0/24 maxlen: 24
217.8.122.0/24 maxlen: 24
217.8.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:23:b9:5c:f5:61:bf:de:71:71:e3:38:9e:16:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=624c8b3497bc7a0e7f65659746a81bd4511e7425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:ba:1e:0c:97:60:d2:ce:f4:72:28:52:13:
de:22:bb:82:b2:83:77:bc:29:89:70:21:1b:11:43:
c1:bb:a4:51:94:d9:79:e9:f1:37:6e:a7:14:02:6b:
65:d4:37:3f:ca:b6:6a:f3:bd:91:9e:4f:7b:43:32:
e7:2d:00:c4:8d:03:d4:15:98:0e:14:57:c9:9f:44:
b5:91:49:19:5d:dc:af:fd:ca:63:f3:4f:a5:85:5b:
8a:50:4e:ef:c9:19:4a:5b:91:ad:4c:e1:07:73:e1:
09:7f:1b:9c:cd:2a:71:4d:98:64:ed:82:ae:de:ef:
57:e2:9f:be:01:41:12:15:84:73:c4:1c:d5:49:43:
05:54:e4:f2:b1:9b:cb:fe:e9:e0:d0:5e:41:3a:90:
b7:1c:79:78:9a:56:e5:f3:5a:d8:dd:b4:4f:a8:58:
e3:00:9a:67:05:9e:f2:d2:e7:46:f9:2a:80:35:ee:
4b:fc:54:b1:0e:b5:a2:8b:27:28:5e:9a:89:a9:9e:
fd:99:1d:74:84:a6:86:ed:cd:b1:32:a5:1a:fc:90:
5a:d5:ad:57:f2:d4:b1:9e:48:9e:ec:16:21:c8:1d:
f8:73:76:11:ab:33:36:d2:ae:56:ae:bd:2f:56:a4:
da:2f:5f:19:d4:07:ab:a8:5f:1d:59:70:35:25:cf:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:8B:34:97:BC:7A:0E:7F:65:65:97:46:A8:1B:D4:51:1E:74:25
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ce:80:b2:60:63:89:34:c9:ff:17:a8:9d:f5:92:73:07:ea:
e8:34:8b:25:a4:ed:15:95:16:f6:36:cc:d0:bb:f1:ee:7d:f6:
f9:50:c9:66:b0:de:eb:3a:60:f9:a9:b0:3a:e5:98:47:6e:3a:
20:27:b8:28:66:9a:94:4e:63:25:74:06:0b:eb:73:38:0f:c5:
a6:43:4f:6f:4d:63:13:af:d4:dc:63:aa:03:16:94:90:95:0b:
82:99:43:2a:be:d4:7f:4e:ba:77:6e:d9:34:63:d6:97:cb:1e:
22:c6:cd:ef:82:46:4d:dd:7b:08:84:e0:04:c5:09:86:6b:fa:
2e:2d:dc:56:f3:fa:cc:7d:91:3d:7d:18:ef:73:e6:b5:86:5b:
ee:fa:3b:4e:3c:ae:6f:16:c2:5e:20:b0:71:13:28:10:f5:c0:
c2:fc:79:21:96:a3:2c:27:78:50:cc:98:79:38:d9:04:f6:b6:
62:cd:2c:a2:26:be:5c:aa:05:de:6d:ee:98:c1:e8:42:02:7e:
0f:7d:a4:50:06:d4:79:00:2b:2f:3e:d3:5d:e3:4e:ee:4d:af:
fe:57:2b:6e:75:73:e6:26:8d:9d:a1:af:7d:56:bb:5e:49:56:
bc:ec:56:78:ed:5c:b8:6a:64:2b:6f:48:88:78:e2:b7:38:d0:
0b:87:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net